b9dea250f313f52eb1833313c5f3587e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9dea250f313f52eb1833313c5f3587e_JaffaCakes118
Size

2.7MB
MD5

b9dea250f313f52eb1833313c5f3587e
SHA1

a0a4700bf36e46c774b3c4d385fecc91719899f8
SHA256

c9254f736bd29eec8ede84cf8d0fe6b4f1dbe1d013ee20d9cb15098b1da02770
SHA512

80a46f93cefc435a807bbc0b5b3001470a6a7c84c21104682f1096b0aeb93e7271dc21b1dc0a622d546f99bf16f1467082a2882336bdcfd64e7a4bdef8bfccd7
SSDEEP

12288:n3BB1/FvlU4mmcQK1+Zm2WsoOx8JsNdO9q3L0UsoX28FD:n3F7ujqQi2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dea250f313f52eb1833313c5f3587e_JaffaCakes118

Files

b9dea250f313f52eb1833313c5f3587e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ